CVE-2018-17142

The html package (aka x/net/html) through 2018-09-17 in Go mishandles <math><template><mo><template>, leading to a "panic: runtime error" in parseCurrentToken…

published September 17, 2018

CVSS
—
EPSS
2%
Percentile
83.6
In the wild
Unconfirmed
What it is

The html package (aka x/net/html) through 2018-09-17 in Go mishandles <math><template><mo><template>, leading to a "panic: runtime error" in parseCurrentToken in parse.go during an html.Parse call.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02377 · 83.6th percentile
Published
2018-09-17T14:00Z
EPSS history
Timeline
  • 17 SEP 14:00Z
    The html package (aka x/net/html) through 2018-09-17 in Go mishandles <math><template><mo><template>, leading to a "panic: runtime error" in parseCurrentToken…
    cvelistv5